Skip to Content.
Sympa Menu

sm-security - [SM-Security] ettercap: format string vulnerability

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <Thomas.Houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] ettercap: format string vulnerability
  • Date: Sun, 12 Jun 2005 14:49:10 +0200

Synopsis
========
Format string vulnerability in the curses_msg function in the Ncurses
interface (ec_curses.c) for Ettercap before 0.7.3 allows remote
attackers to execute arbitrary code. (CAN-2005-1796)

Background
==========
ettercap is a multipurpose sniffer for switched LANs.

Description
===========
>From FrSIRT/ADV-2005-0670:
A vulnerability was identified in Ettercap, which may be exploited by
remote attackers to execute arbitrary commands. This flaw is due to a
format string error in the "curses_msg()" function of the Ncurses
interface (ec_curses.c) when processing specially crafted passwords,
which may be exploited by remote attackers to execute arbitrary commands.

Impact
======
A remote attacker could craft a malicious network flow that would
result in executing arbitrary code with the rights of the user running
the Ettercap tool, which is often root.

Affected packages
=================
ettercap in stable-rc and stable is affected. ettercap is already
version NG-0.7.3 in devel and test.
This is now fixed in all grimoires (ettercap updated to NG-0.7.3).

Resolution
==========
All ettercap users should upgrade to the latest available version:
#scribe update
#cast -c ettercap

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] ettercap: format string vulnerability, Thomas Houssin, 06/12/2005

Archive powered by MHonArc 2.6.24.

Top of Page